Ska.exe and ska.dll install with the Happy99.worm. One or both of these may be hidden files. This worm has been around for quite a while. It may display a message that reads "Happy New Year 1999" that shows fireworks to hide it's installation. Files called happy99.exe and happy00.exe may appear on your system. This worm spreads via email and newsgroup binaries. It may modify your winsock file (wsock32.dll) copying the original version to wsock32.ska.

Was a bit taken aback to find the above listed in WinPatrol; but, I do not find any other evidence of alleged worm on this PC. What am I to make of this, then? WP also shows a few other items that are "likely" okay and/or safe, but "sometimes" are renamed files if taken over by this or that trojan dropper, etc.

I've tried/bought/discarded many a security app over time, and may often run 8-12 security apps while on the internet. May I ask for your collective thoughts, on what may/may not be at play here, on our PC?

Thanks for info: I have indeed used SockLock (and forgot about it)! And, I think Spybot also inserts dummy file/s, or has an option for it. (?)

Since I "live here" at Wilders, I sometimes forget that other forums exist, but yes, I should go to CastleCops, post note there and let the gang chew on this, and see what the overall opinion may tend toward or write author, & see what he says.

I have found no "happy" anything similar named file on 3 drives, tho' it may not mean much as I suppose names of the nasties may mutate. I connect to the net fine, have little or no page load failures (as a friend said may happen if winsock protocol is messed with).